Overview

overview

7

Static

static

3

Nitrox_1.7.1.0.zip

windows11-21h2-x64

7

lib/Newton...on.dll

windows11-21h2-x64

1

lib/NitroxClient.dll

windows11-21h2-x64

1

lib/NitroxClient.pdb

windows11-21h2-x64

3

lib/Nitrox...ca.dll

windows11-21h2-x64

1

lib/Nitrox...ca.pdb

windows11-21h2-x64

3

lib/NitroxModel.dll

windows11-21h2-x64

1

lib/NitroxModel.pdb

windows11-21h2-x64

3

lib/NitroxPatcher.dll

windows11-21h2-x64

1

lib/Nitrox...ll.xml

windows11-21h2-x64

1

lib/NitroxPatcher.pdb

windows11-21h2-x64

3

lib/NitroxServer.dll

windows11-21h2-x64

1

lib/Nitrox...ll.xml

windows11-21h2-x64

1

lib/NitroxServer.pdb

windows11-21h2-x64

3

lib/Serilo...nc.dll

windows11-21h2-x64

1

lib/Serilo...le.dll

windows11-21h2-x64

1

lib/Serilo...ap.dll

windows11-21h2-x64

1

lib/Serilog.dll

windows11-21h2-x64

1

lib/System...rs.dll

windows11-21h2-x64

1

lib/System...on.dll

windows11-21h2-x64

1

lib/System...ol.dll

windows11-21h2-x64

1

lib/System.Memory.dll

windows11-21h2-x64

1

lib/System...rs.dll

windows11-21h2-x64

1

lib/System...fe.dll

windows11-21h2-x64

1

lib/System...ol.dll

windows11-21h2-x64

1

lib/System...ws.dll

windows11-21h2-x64

1

lib/ToastN...es.dll

windows11-21h2-x64

1

lib/ToastN...ns.dll

windows11-21h2-x64

1

lib/Window...er.dll

windows11-21h2-x64

1

lib/discor...dk.dll

windows11-21h2-x64

1

lib/dnlib.dll

windows11-21h2-x64

1

lib/protobuf-net.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    90s
  • max time network
    97s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    14-12-2024 16:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    lib/WindowsFirewallHelper.dll

  • Size

    196KB

  • MD5

    5c3068377c99721ee6f0b6f2f76cc20c

  • SHA1

    7782dcf1228c95b70f9c3d5dc8d1709e10d72a2b

  • SHA256

    3ee09412d7e11f51efbc9a32298110bfb5901d89b39f53980aec1816c3aa7cdd

  • SHA512

    a0405c3fe6d9a589bfbc81051bb406fb31972118febd76d6f5efaabcd406e5fb0368e19a8130266d83fc38f53b98131ced7fc1fa9e841b25a95a43a03a1d4a82

  • SSDEEP

    3072:XKXEvgsJI4ewDrk8T5MlqCtLT66TYJ797jpv5OtLRX+0qfVLHdmu:XKkgnZmFMlq6LKzOtRq

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\lib\WindowsFirewallHelper.dll,#1
    1⤵
      PID:3972

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads